v6.8.0

What's Changed

• fix: restore express prototypes so injecting doesn't break http requests by @gunjam in #333
• ci(ci): set job permissions by @Fdawgs in #340
• ci: set permissions at workflow level by @Fdawgs in #341
• ci: restore job level permissions by @Fdawgs in #342
• ci: set workflow permissions to read-only by default by @Fdawgs in #343
• build(deps-dev): bump express from 4.21.2 to 5.1.0 by @dependabot[bot] in #344
• build(deps): bump process-warning from 4.0.1 to 5.0.0 by @dependabot[bot] in #345
• build(deps-dev): bump tinybench from 3.1.1 to 4.0.1 by @dependabot[bot] in #346
• build(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @dependabot[bot] in #347
• build(deps-dev): bump multer from 1.4.5-lts.2 to 2.0.0 by @dependabot[bot] in #348
• chore(license): update date ranges; standardise style by @Fdawgs in #349
• build(deps-dev): bump @types/node from 22.15.35 to 24.0.9 by @dependabot[bot] in #350
• ci(benchmark): use immutable tag by @Fdawgs in #351
• build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in #352
• chore(.npmrc): ignore scripts by @Fdawgs in #354
• build(deps-dev): remove @fastify/pre-commit by @Fdawgs in #355
• ci(ci): add concurrency config by @Fdawgs in #356
• ci(benchmark): remove benchmark workflow by @Fdawgs in #357
• feat: bindInject by @ilteoood in #362
• build(deps-dev): bump @types/node from 24.10.4 to 25.0.3 by @dependabot[bot] in #361
• build(deps): bump set-cookie-parser from 2.7.2 to 3.0.1 by @dependabot[bot] in #363
• ci: remove stale.yml by @Tony133 in #364
• chore(license): standardise license notice by @Fdawgs in #365
• style: remove trailing whitespace by @Fdawgs in #367
• build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in #368
• build(deps-dev): bump c8 from 10.1.3 to 11.0.0 by @dependabot[bot] in #370
• build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @dependabot[bot] in #371
• ci: add lock-threads workflow by @Fdawgs in #373
• build(deps-dev): bump tinybench from 4.1.0 to 6.0.1 by @dependabot[bot] in #375
• refactor(types): migrate from tsd to tstyche by @Tony133 in #377
• chore: update depedabot setting by @climba03003 in #378
• chore(package.json): fix delvedor's personal url by @Fdawgs in #382
• chore: bump @types/node from 25.9.4 to 26.0.0 in the dev-dependencies-typescript group by @dependabot[bot] in #384
• fix: support cookie v2.x by @Tony133 in #387
• fix(types): allow custom HTTP methods in InjectOptions.method by @tzafrirben in #391
• fix: aggregate array request header values like a real HTTP server by @LeSingh1 in #388
• ci: pin actions to commit-hash by @Fdawgs in #392
• chore: bump c8 from 11.0.0 to 12.0.0 by @dependabot[bot] in #393
• chore: bump fastify/workflows/.github/workflows/plugins-ci.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in #396
• chore: bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in #397
• chore(.npmrc): add min-release-age by @Fdawgs in #395
• feat: add isLightMyRequest to Request and Response by @climba03003 in #400
• feat: implements injected cookies encoding respecting http state management rfc by @big-kahuna-burger in #401
• ci: enable trusted publishing releases by @Puppo in #405

New Contributors

• @gunjam made their first contribution in #333
• @ilteoood made their first contribution in #362
• @Tony133 made their first contribution in #364
• @tzafrirben made their first contribution in #391
• @LeSingh1 made their first contribution in #388
• @big-kahuna-burger made their first contribution in #401
• @Puppo made their first contribution in #405

Full Changelog: v6.6.0...v6.8.0